Re: brcmfmac: driver crash with iOS 18.6.1, potential DoS

On 9/24/2025 4:53 AM, Hsien Chou wrote:
> Hi Arend and everyone on the mailing lists,
> 
> I'm reporting a driver crash in brcmfmac that can be triggered by an 
> iPhone with iOS 18.6.1 or newer. This issue *allows a remote, 
> unauthenticated device* to crash the Wi-Fi driver, leading to a denial 
> of service.
> 
> The full details, including complete crash logs and a step-by-step 
> reproduction guide, are available on the GitHub issue page:
> https://github.com/raspberrypi/linux/issues/7033 <https://github.com/ 
> raspberrypi/linux/issues/7033>
> 
> For a quick reference, here are the key details:
> * *Affected devices:* A Raspberry Pi running as a Wi-Fi access point.
> * *Trigger:* An iPhone with iOS > 18.6.1 attempts to view the properties 
> of the Wi-Fi network.
> * *Root cause (based on preliminary analysis):* The driver panics, 
> possibly due to a malformed or unexpected frame.
> 
> Please let me know if you need any additional information to debug this 
> issue.

Having the kernel .config file from the Raspberry Pi would be helpful 
reproducing the driver build. Can you provide that?

Regards,
Arend